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WHAT IS CLAIMED IS : 

1 . A method for securing packet-based communications comprising: 
receiving a stream comprising a plurality of packets, all of the packets having 

an original destination address and an original source address; and 

for each of the packets, changing the original destination address to a selected 
one of a plurality of modified destination addresses assigned to a remote device, 
wherein each of the selected modified destination addresses is resolvable by the 
remote device to the original destination address. 

2. The method of Claim 1, wherein, except for a first one of the packets, 
each of the packets is changed to a different one of the modified destination addresses 
than a preceding one of the packets. 

3. The method of Claim 1, wherein no more than ten consecutive packets 
in the stream are changed to an identical one of the modified destination addresses. 

4. The method of Claim 1, further comprising, for each of the packets, 
changing the original source address to a selected one of a plurality of modified 
source addresses, wherein each of the selected modified source addresses is resolvable 
by the remote device to the original source address. 

5. The method of Claim 1, further comprising randomly selecting the 
modified destination address for the packet from a range of available destination 
addresses for the remote device. 

6. The method of Claim 1, further comprising selecting the modified 
destination address for the packet from a range of available destination addresses for 
the remote device based on a hopping pattern. 
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7. The method of Claim 1, wherein the original destination address 
comprises an internet protocol address and a port, and the modified destination 
address for the packet comprises a modified internet protocol address and a modified 
port. 

8. The method of Claim 1, wherein the stream comprises an internet 
protocol based voice communication session. 

9. The method of Claim 1 , further comprising: 
detecting initiation of the stream; 

identifying the remote device based upon the original destination address; and 
negotiating translation parameters for the stream with the remote device, the 

translation parameters comprising an algorithm dictating how to select from among 

the modified destination addresses. 
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10. A method for securing packet-based communications comprising: 
negotiating translation parameters for a communication stream with a remote 

device, the translation parameters comprising an original destination address, a 

plurality of available destination addresses, and an algorithm; 

determining a modified destination address from among the available 

destination addresses according to the algorithm; 

receiving a packet having the modified destination address; and 
changing the packet to have the original destination address. 

1 1 . The method of Claim 1 0, wherein: 

the translation parameters further comprise an original source address and a 
plurality of available source addresses; and further comprising: 

determining a modified source address from among the available source 
addresses according to the algorithm. 

12. The method of Claim 1 1 , the packet further having the modified source 
address, the method further comprising changing the packet to have the original 
source address. 

13. The method of Claim 10, wherein the algorithm comprises a hopping 
pattern that dictates how to select from among the available destination addresses. 
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14. A translation module comprising: 

a first interface operable to receive a stream comprising a plurality of packets, 
all of the packets having an original destination address and an original source 
address; 

a controller operable, for each of the packets, to change the original 
destination address to a selected one of a plurality of modified destination addresses 
assigned to a remote device, wherein each of the selected modified destination 
addresses is resolvable by the remote device to the original destination address; and 

a second interface operable to transmit the changed packets for receipt by the 
remote device. 

15. The translation module Claim 14, wherein, except for a first one of the 
packets, each of the packets is changed to a different one of the modified destination 
addresses than a preceding one of the packets. 

16. The translation module Claim 14, wherein the controller is further 
operable, for each of the packets, to change the original source address to a selected 
one of a plurality of modified source addresses, wherein each of the selected modified 
source addresses is resolvable by the remote device to the original source address. 

17. The translation module Claim 14, wherein the controller is further 
operable to select the modified destination address for the packet from a range of 
available destination addresses for the remote device based on a hopping pattern. 



25 18. The translation module Claim 14, wherein the original destination 

address comprises an internet protocol address and a port, and the modified 
destination address for the packet comprises a modified internet protocol address and 
a modified port. 
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19. The translation module Claim 14, wherein the controller is further 
operable to: 

detect initiation of the stream; 

identify the remote device based upon the original destination address; and 
negotiate translation parameters for the stream with the remote device, the 

translation parameters comprising an algorithm dictating how to select from among 

the modified destination addresses. 
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20. Logic for securing packet-based communications, the logic encoded in 
a medium and operable when executed to: 

receive a stream comprising a plurality of packets, all of the packets having an 
original destination address and an original source address; and 

for each of the packets, change the original destination address to a selected 
one of a plurality of modified destination addresses assigned to a remote device, 
wherein each of the selected modified destination addresses is resolvable by the 
remote device to the original destination address. 

21. The logic of Claim 20, wherein, except for a first one of the packets, 
each of the packets is changed to a different one of the modified destination addresses 
than a preceding one of the packets. 

22. The logic of Claim 20, further operable, for each of the packets, to 
change the original source address to a selected one of a plurality of modified source 
addresses, wherein each of the selected modified source addresses is resolvable by the 
remote device to the original source address. 

23. The logic of Claim 20, further operable to select the modified 
destination address for the packet from a range of available destination addresses for 
the remote device based on a hopping pattern. 

24. The logic of Claim 20, wherein the original destination address 
comprises an internet protocol address and a port, and the modified destination 
address for the packet comprises a modified internet protocol address and a modified 
port. 
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25. The logic of Claim 20, further operable to: 
detect initiation of the stream; 

identify the remote device based upon the original destination address; and 
negotiate translation parameters for the stream with the remote device, the 

translation parameters comprising an algorithm dictating how to select from among 

the modified destination addresses. 
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26. A translation module comprising: 

means for receiving a stream comprising a plurality of packets, all of the 
packets having an original destination address and an original source address; and 

means for for each of the packets, changing the original destination address to 
a selected one of a plurality of modified destination addresses assigned to a remote 
device, wherein each of the selected modified destination addresses is resolvable by 
the remote device to the original destination address. 
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27. A method for securing packet-based communications comprising: 

detecting initiation of a communication stream, the communication stream 
comprising a plurality of packets, all of the packets having an original destination 
address and an original source address; 

identifying a remote device based upon the original destination address; 

negotiating translation parameters for the communication stream with the 
remote device, the translation parameters comprising an algorithm dictating how to 
select from among a plurality of modified destination addresses; 

receiving the packets; and 

for each of the packets, selecting one of the modified destination addresses 
according to the algorithm and changing the original destination address to the 
selected modified destination address, wherein each of the selected modified 
destination addresses is resolvable by the remote device to the original destination 
address and wherein, except for a first one of the packets, each of the packets is 
changed to a different one of the modified destination addresses than a preceding one 
of the packets. 
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